$ rpki-client -vvf repo-rpki.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/9A4F69E8B46063638E82F1FB060AB3D725FA4821.mft File: 9A4F69E8B46063638E82F1FB060AB3D725FA4821.mft (raw, json) Hash identifier: 4qqaawzlualVeIoNf2N4Eyl6cYogv9O9j2CbolVOJZg= Subject key identifier: 93:8D:CD:1A:06:94:FD:63:A9:8C:AB:E0:B1:BC:F9:BE:1D:08:C5:82 Authority key identifier: 9A:4F:69:E8:B4:60:63:63:8E:82:F1:FB:06:0A:B3:D7:25:FA:48:21 Certificate issuer: /CN=9A4F69E8B46063638E82F1FB060AB3D725FA4821 Certificate serial: 200528E29CD81520CF1843DC26E3F6DFC246F4F0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A4F69E8B46063638E82F1FB060AB3D725FA4821.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/9A4F69E8B46063638E82F1FB060AB3D725FA4821.mft Manifest number: 02A3 Signing time: Tue 13 May 2025 08:04:34 +0000 Manifest this update: Tue 13 May 2025 07:59:34 +0000 Manifest next update: Fri 16 May 2025 13:34:34 +0000 Files and hashes: 1: 9A4F69E8B46063638E82F1FB060AB3D725FA4821.crl (hash: y/ZpgFAjuBR6OSec+8Fm+YAQeYTn8RA+glttcI6S3/Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/9A4F69E8B46063638E82F1FB060AB3D725FA4821.crl rsync://repo-rpki.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/9A4F69E8B46063638E82F1FB060AB3D725FA4821.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A4F69E8B46063638E82F1FB060AB3D725FA4821.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 13:34:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:05:28:e2:9c:d8:15:20:cf:18:43:dc:26:e3:f6:df:c2:46:f4:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A4F69E8B46063638E82F1FB060AB3D725FA4821 Validity Not Before: May 13 07:59:34 2025 GMT Not After : May 16 13:34:34 2025 GMT Subject: CN=938DCD1A0694FD63A98CABE0B1BCF9BE1D08C582 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b3:e5:08:ab:2c:31:5d:08:be:89:42:4a:83: a8:f9:35:d3:83:bc:2c:66:21:5d:6c:3e:24:ea:da: 43:54:20:b5:5c:ff:94:d4:01:78:5f:f4:8f:8c:4a: fa:55:39:fe:f2:dc:61:f8:de:58:15:5b:61:50:1d: 27:ac:9c:14:f5:b9:3b:fc:3e:ac:de:37:9e:50:87: ae:a1:e6:9d:55:b6:5d:d8:07:0c:6d:bc:32:9b:ae: ba:f6:ed:d4:54:c2:18:71:66:8d:3f:5f:10:20:d9: b7:57:b5:9b:a3:c9:71:ba:22:16:ff:d5:a4:c9:0d: 97:1d:9b:ca:b1:22:24:87:bf:5c:7d:93:6f:5a:24: 90:0d:23:6f:b9:9f:20:09:1d:45:ff:11:60:67:4e: a2:b4:71:ad:10:9b:9a:85:bc:ab:df:4d:ec:e0:1a: 9a:92:4d:ae:52:75:51:fd:c6:b5:e8:8a:46:9e:da: e9:b1:ce:a9:93:67:e3:25:b6:a2:0e:ce:f7:26:3b: 11:c9:cd:2c:a3:7d:94:fc:ac:6e:63:e4:f2:21:41: ca:9e:49:c3:6e:8f:09:ee:af:82:88:5f:25:d8:1b: 39:d6:4e:4c:8d:49:13:51:66:1a:9e:1c:4f:54:3d: 2e:f4:cd:23:93:4f:72:c3:d0:9a:b6:33:23:4e:4e: 10:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:8D:CD:1A:06:94:FD:63:A9:8C:AB:E0:B1:BC:F9:BE:1D:08:C5:82 X509v3 Authority Key Identifier: keyid:9A:4F:69:E8:B4:60:63:63:8E:82:F1:FB:06:0A:B3:D7:25:FA:48:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/9A4F69E8B46063638E82F1FB060AB3D725FA4821.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A4F69E8B46063638E82F1FB060AB3D725FA4821.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/9A4F69E8B46063638E82F1FB060AB3D725FA4821.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:c8:fd:c9:e4:b5:74:96:b6:da:d5:d3:4c:0c:e6:05:6d:50: 58:a1:b0:72:d6:54:49:02:b5:55:92:ec:41:8b:68:f1:2c:7d: 21:bf:e7:15:5c:84:a9:e1:a9:30:b0:60:f1:97:85:f9:dd:7b: ca:78:a6:52:9f:2a:98:f9:5d:03:3a:dc:77:e8:6b:dd:e2:1e: bb:19:fa:12:a6:f4:d3:df:66:8c:81:07:1c:3d:03:18:33:eb: 93:f3:59:01:39:38:ff:7e:d1:6f:81:32:b4:42:7d:17:76:26: 1a:38:62:0e:ac:4b:0c:0f:21:db:52:92:09:9b:23:6c:2e:01: e7:4a:0d:c8:8e:00:cd:10:ef:56:78:5c:98:a6:a4:3a:70:90: 8f:9e:0e:82:94:1b:20:15:7e:c1:ff:f3:69:f8:2c:54:b0:6b: 44:2a:e7:aa:27:5d:ef:2b:8a:e8:aa:a6:9f:fd:ba:03:70:9c: 16:46:5f:d2:48:2d:9d:fe:79:a1:47:5c:6c:2e:d8:78:ea:a2: c8:e1:46:75:a9:04:2b:ba:a0:8e:15:71:6f:dd:5c:15:fb:bd: f7:2d:a6:19:d8:a6:74:49:72:86:6c:de:15:f7:5c:3e:57:5c: 3b:4a:e2:7c:34:51:e9:8e:3a:a9:50:68:16:1c:e9:5c:b9:f4: f6:2d:2a:e4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIAUo4pzYFSDPGEPcJuP238JG9PAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE0RjY5RThCNDYwNjM2MzhFODJGMUZCMDYwQUIzRDcy NUZBNDgyMTAeFw0yNTA1MTMwNzU5MzRaFw0yNTA1MTYxMzM0MzRaMDMxMTAvBgNV BAMTKDkzOERDRDFBMDY5NEZENjNBOThDQUJFMEIxQkNGOUJFMUQwOEM1ODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9s+UIqywxXQi+iUJKg6j5NdOD vCxmIV1sPiTq2kNUILVc/5TUAXhf9I+MSvpVOf7y3GH43lgVW2FQHSesnBT1uTv8 PqzeN55Qh66h5p1Vtl3YBwxtvDKbrrr27dRUwhhxZo0/XxAg2bdXtZujyXG6Ihb/ 1aTJDZcdm8qxIiSHv1x9k29aJJANI2+5nyAJHUX/EWBnTqK0ca0Qm5qFvKvfTezg GpqSTa5SdVH9xrXoikae2umxzqmTZ+MltqIOzvcmOxHJzSyjfZT8rG5j5PIhQcqe ScNujwnur4KIXyXYGznWTkyNSRNRZhqeHE9UPS70zSOTT3LD0Jq2MyNOThDzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUk43NGgaU/WOpjKvgsbz5vh0IxYIwHwYDVR0j BBgwFoAUmk9p6LRgY2OOgvH7Bgqz1yX6SCEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NjM4YmQyMS1iZTU2LTQyYjQtODI3OC0wNTQwNWRjZTVlODgvMC85QTRGNjlFOEI0 NjA2MzYzOEU4MkYxRkIwNjBBQjNENzI1RkE0ODIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUE0RjY5RThCNDYwNjM2MzhFODJGMUZCMDYwQUIzRDcyNUZB NDgyMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDYzOGJkMjEtYmU1Ni00MmI0LTgy NzgtMDU0MDVkY2U1ZTg4LzAvOUE0RjY5RThCNDYwNjM2MzhFODJGMUZCMDYwQUIz RDcyNUZBNDgyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFnI/cnktXSWttrV00wM5gVtUFihsHLWVEkC tVWS7EGLaPEsfSG/5xVchKnhqTCwYPGXhfnde8p4plKfKpj5XQM63Hfoa93iHrsZ +hKm9NPfZoyBBxw9Axgz65PzWQE5OP9+0W+BMrRCfRd2Jho4Yg6sSwwPIdtSkgmb I2wuAedKDciOAM0Q71Z4XJimpDpwkI+eDoKUGyAVfsH/82n4LFSwa0Qq56onXe8r iuiqpp/9ugNwnBZGX9JILZ3+eaFHXGwu2HjqosjhRnWpBCu6oI4VcW/dXBX7vfct phnYpnRJcoZs3hX3XD5XXDtK4nw0UemOOqlQaBYc6Vy59PYtKuQ= -----END CERTIFICATE-----Generated at Tue May 13 19:26:37 2025 by rpki-client